WordPress Plugin Vulnerabilities

iMember360is 3.9.001 - XSS / Disclosure / Code Execution

Description

The infusion4wp WordPress plugin was affected by a XSS / Disclosure / Code Execution security vulnerability.

Affects Plugins

Plugin icon
infusion4wp
Fixed in 3.9.002

References

CVE
CVE-2014-3842
Exploitdb
33076
URL
https://packetstormsecurity.com/files/#126324/
URL
https://en.0day.today/exploits/22184

Miscellaneous

Verified
No
WPVDB ID
ef6dd9de-b834-4b52-bef9-14719f31caac

Timeline

Publicly Published
2014-04-25 (about 12 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2016-02-03
Title
WP-Invoice <= 4.1.0 - Multiple Vulnerabilities
Published
2020-03-23
Title
WPvivid Backup < 0.9.36 - Missing Authorization Leading To Database Leak
Published
2024-11-12
Title
Twigify <= 1.1.2 - Vulnerable Twig Package
Published
2016-11-17
Title
Relevanssi Premium < 1.14.6.1 - SQL Injection & PHP Object Injection
Published
2015-07-11
Title
FileDownload <= 1.4 - Multiple Issues